Information we collect
Through the mobile app we may collect:
- Authentication data — username, password (encrypted), one-time codes, biometric identifiers if you enable them.
- Account data — balances, transaction history, transfers and messages associated with your membership.
- Device data — device type, operating system, app version, unique identifiers, crash logs and diagnostic information.
- Location data — only if you grant location permission, used for ATM locator and fraud-prevention signals.
- Camera & photos — when you use mobile deposit, we access the camera to capture check images.
How we use your information
We use the data listed above to operate the app, authenticate you, process transactions, prevent fraud, troubleshoot issues, and comply with applicable law. We do not use your account information for unrelated marketing without your consent.
Device permissions
The app requests only the device permissions it needs. You can change permissions at any time in your device settings:
- Biometrics — optional; enables Face ID or Touch ID sign-in.
- Camera — required for mobile check deposit.
- Notifications — optional; enables push alerts for transactions and security events.
- Location — optional; powers the ATM locator and fraud checks.
Retention
Account data is retained for as long as your membership is active and for applicable record-keeping periods after closure, in accordance with federal law. Diagnostic and device data are kept only as long as needed to debug issues and maintain the app.
Security
The app uses transport-layer encryption, multi-factor authentication and device-based protections. Sensitive fields are encrypted at rest. Even so, no system is 100% secure; please safeguard your credentials and report anything suspicious to us. See our fraud & security page.
Your choices
- Turn permissions on or off in your device settings at any time.
- Disable push notifications inside the app or from device settings.
- Sign out of the app on any device from Online Banking → Security.
- Uninstall the app to stop all mobile data collection (account continues normally).
Children’s privacy
The app is not intended for and knowingly used by children under 13. We do not knowingly collect personal information from children through the app. Custodial accounts for minors are managed by a parent or guardian.
Contact
Questions about app privacy? Phone (541) 336-2321, email cu@pacificsprucefcu.com, or write to: Pacific Spruce FCU, PO Box 178, Toledo, OR 97391.